nss: Fix GetCertType returning SERVER_CERT for explicitly distrusted CA certs.

chrome/chrome_tests.gypi

Index: chrome/chrome_tests.gypi
diff --git a/chrome/chrome_tests.gypi b/chrome/chrome_tests.gypi
index e743ae664617dbdf4786cae7ea2b203d16e1c552..76ea0e3ce69725397b79b7b8a8a70f09ce511a30 100644
--- a/chrome/chrome_tests.gypi
+++ b/chrome/chrome_tests.gypi
@@ -2071,6 +2071,7 @@
         'common/net/gaia/oauth2_mint_token_fetcher_unittest.cc',
         'common/net/gaia/oauth2_mint_token_flow_unittest.cc',
         'common/net/gaia/oauth2_revocation_fetcher_unittest.cc',
+        'common/net/x509_certificate_model_unittest.cc',
         'common/service_process_util_unittest.cc',
         'common/string_ordinal_unittest.cc',
         'common/switch_utils_unittest.cc',
@@ -2486,6 +2487,11 @@
             ['exclude', '^browser/extensions/key_identifier_conversion_views_unittest.cc'],
           ],
         }],
+        ['use_nss==0 and use_openssl==0', {
+          'sources!': [
+            'common/net/x509_certificate_model_unittest.cc',
+          ],
+        }],
         ['use_openssl==1', {
           'sources/': [
             # OpenSSL build does not support firefox importer. See